Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa
File: b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa (raw, json)
Hash identifier: fjRDSSj/pgQw1Qr4T+LSES3HQuONx4pvI8fRxzYd0LI=
Subject key identifier: 36:8D:96:BB:8B:EE:43:35:6F:5D:71:5E:21:BC:82:BA:A2:E2:71:D3
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E506A42EC86394DBB507400
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.58.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6a:42:ec:86:39:4d:bb:50:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=238522ed-bea4-4a7a-9e51-46d3b77b366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:b0:12:e2:29:68:35:4c:6d:e8:50:79:88:
89:16:75:5f:a7:3f:af:28:f4:45:6f:a6:52:4d:dc:
e6:c7:36:aa:32:08:c5:59:8b:f3:2f:56:72:c0:57:
83:7d:ac:93:22:93:d0:10:b0:bb:cc:32:8a:0f:df:
b9:40:22:4f:cd:9e:be:07:4c:51:ed:5a:8a:26:4a:
ee:ba:01:77:62:e4:89:af:00:60:26:86:a1:be:9d:
4b:21:fd:35:76:30:64:fb:15:8d:69:b8:fb:81:a9:
f6:89:84:8c:f1:a9:b2:bf:ff:fb:3e:ac:64:1e:fa:
10:1a:89:ec:a3:6b:61:25:29:25:64:5a:0e:a6:5a:
5f:5b:51:a4:2c:a7:25:e6:02:e6:22:36:0f:9c:c4:
5a:97:2b:86:11:d1:68:05:1f:26:aa:78:f9:6c:d2:
b9:78:c0:bd:8f:64:1e:03:a3:80:a3:7e:7b:18:32:
bb:2b:5b:81:ad:a5:98:42:c3:77:f1:a9:5e:79:01:
16:73:1d:11:bb:c6:3b:48:5a:db:6e:32:9d:f9:df:
25:14:e2:20:bf:75:ec:19:7c:c7:5a:1b:a0:84:73:
6d:e6:44:d3:20:3d:b5:47:b1:d2:56:a0:e8:f5:1d:
31:73:e3:00:90:66:dc:8d:3b:ed:e4:db:02:09:c8:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:96:BB:8B:EE:43:35:6F:5D:71:5E:21:BC:82:BA:A2:E2:71:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:1b:71:69:80:d1:c3:21:99:c5:0c:5b:5a:04:8e:8e:36:93:
a2:1b:ce:41:15:df:b5:63:d4:43:0f:86:2a:cd:52:85:09:cf:
a5:a0:60:7d:a4:0d:06:2d:17:28:dc:23:55:d1:0f:a0:e7:a7:
46:b3:42:17:5d:31:c4:9d:49:65:6f:c5:bf:01:4c:8c:b7:58:
1c:ef:77:10:0d:26:63:1e:89:1c:81:07:95:c0:df:8c:8d:fb:
1a:7b:fd:9d:7a:dc:b2:8e:e1:22:c1:68:b7:5b:dd:27:c5:42:
fb:de:7f:b9:da:80:64:18:54:0a:91:fe:f8:04:c3:ee:83:cd:
af:2f:33:0d:f9:06:56:47:fd:0a:b7:f6:b2:a3:53:43:89:d8:
38:30:02:05:e6:80:ee:63:b0:4d:95:0b:64:f4:9f:f6:5d:9b:
3d:79:d7:f4:c5:f9:23:21:d5:81:e7:f5:73:fe:77:f3:62:71:
5d:2f:0e:08:1b:c5:f8:e6:88:59:3c:bb:8d:55:4c:17:bf:f3:
81:7a:20:1e:55:6c:cd:3e:48:1d:75:b3:fa:11:3f:be:40:47:
18:5a:64:17:bc:5c:4f:eb:e6:5d:2e:9c:96:e8:1a:4c:bb:e7:
c0:dc:2f:ef:b4:81:0c:e6:a3:17:3c:f2:6c:83:de:b3:b7:57:
63:3d:cb:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGpC7IY5TbtQdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
MjM4NTIyZWQtYmVhNC00YTdhLTllNTEtNDZkM2I3N2IzNjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitWwEuIpaDVMbehQeYiJFnVfpz+vKPRFb6ZS
TdzmxzaqMgjFWYvzL1ZywFeDfayTIpPQELC7zDKKD9+5QCJPzZ6+B0xR7VqKJkru
ugF3YuSJrwBgJoahvp1LIf01djBk+xWNabj7gan2iYSM8amyv//7PqxkHvoQGons
o2thJSklZFoOplpfW1GkLKcl5gLmIjYPnMRalyuGEdFoBR8mqnj5bNK5eMC9j2Qe
A6OAo357GDK7K1uBraWYQsN38aleeQEWcx0Ru8Y7SFrbbjKd+d8lFOIgv3XsGXzH
WhughHNt5kTTID21R7HSVqDo9R0xc+MAkGbcjTvt5NsCCcjktQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaNlruL7kM1b11xXiG8grqi4nHTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYjhiOWY0OTgtNGJjMC0z
YzNlLWIyMDMtYTdmYzY2ODBhNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUbcWmA0cMhmcUMW1oEjo42k6IbzkEV37Vj1EMPhirNUoUJz6WgYH2k
DQYtFyjcI1XRD6Dnp0azQhddMcSdSWVvxb8BTIy3WBzvdxANJmMeiRyBB5XA34yN
+xp7/Z163LKO4SLBaLdb3SfFQvvef7nagGQYVAqR/vgEw+6Dza8vMw35BlZH/Qq3
9rKjU0OJ2DgwAgXmgO5jsE2VC2T0n/Zdmz151/TF+SMh1YHn9XP+d/NicV0vDggb
xfjmiFk8u41VTBe/84F6IB5VbM0+SB11s/oRP75ARxhaZBe8XE/r5l0unJboGky7
58DcL++0gQzmoxc88myD3rO3V2M9yyE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:01 2025 by rpki-client